Sec. 5. (a) Any state agency that owns or licenses computerized data that includes personal information shall disclose a breach of the security of the system following discovery or notification of the breach to any state resident whose unencrypted personal information was or is reasonably believed to have been acquired by an unauthorized person.

     (b) The disclosure of a breach of the security of the system shall be made:

Terms Used In Indiana Code 4-1-11-5

  • breach of the security of the system: means unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of personal information maintained by a state or local agency. See Indiana Code 4-1-11-2
  • Discovery: Lawyers' examination, before trial, of facts and documents in possession of the opponents to help the lawyers prepare for trial.
  • personal information: means :

    Indiana Code 4-1-11-3

  • state agency: has the meaning set forth in IC 4-1-10-2. See Indiana Code 4-1-11-4
(1) without unreasonable delay; and

(2) consistent with:

(A) the legitimate needs of law enforcement, as described in section 7 of this chapter; and

(B) any measures necessary to:

(i) determine the scope of the breach; and

(ii) restore the reasonable integrity of the data system.

As added by P.L.91-2005, SEC.2.